rizzo.py
Features
Identifies and re-names functions between two or more IDBs based on:
To generate signatures for functions in your current IDB:
To apply generated signatures to your current IDB:
Some pre-generated signatures are provided in the included sub-directories.
Installation
Just copy rizzo.py into your IDA plugins directory.
ode-signature-plugin-for-ida/
https://github.com/devttys0/ida/tree/master/plugins/rizzo
ALSO READ THIS THREAD
http://www.devttys0.com/2014/10/a-code-signature-plugin-for-ida/
Features
Identifies and re-names functions between two or more IDBs based on:
- Formal signatures (i.e., exact function signatures)
- References to unique string
- References to unique constants
- Fuzzy signatures (i.e., similar function signatures)
- Call graphs (e.g., identification by association)
To generate signatures for functions in your current IDB:
To apply generated signatures to your current IDB:
Some pre-generated signatures are provided in the included sub-directories.
Installation
Just copy rizzo.py into your IDA plugins directory.
ode-signature-plugin-for-ida/
https://github.com/devttys0/ida/tree/master/plugins/rizzo
ALSO READ THIS THREAD
http://www.devttys0.com/2014/10/a-code-signature-plugin-for-ida/